General Databases (73) Linux (41) Outside the Cube (5088) Programming (679) Web publishing (65) Windows (431) Apache (6) File Types (33) Internet Explorer (6) Network (11) Passwords (6) Printing Processes (13) Programming (318)
Exchange Links About this site Links to us 

|
General :: Windows
General Windows topics. User shortcuts, installation/ destallation, compatibility, registry entries, power user and undocumented features.
Articles:
This list is sorted by recent document popularity (not total page views).
New documents will first appear at the bottom.
Featured Article
Spysheriff blocks my desktop background - how to remove SpysheriffQuestion: This morning I came to my computer and found an application named Spysheriff running. It supposedly had found a dozen of problems on my computer and demanded a purchase in order to remove them.
It also had changed my desktop background image so that it looked like a error message (see the screenshot):
It tries to tell me that my computer is in really bad shape and I am in danger unless I pay them..
I tried to remove that desktop background image using the control panel but it is disabled! What can I do?
Answer:
|
|
Spysheriff is malware and should not be used to clean a PC from spyware/ adware/ malware. It's pretty bad e.g. if you try to use System Restore you will find that Spysheriff erased your restore points, so that won't work.
SpySheriff does come with an uninstall program which removes SpySheriff, but it will not undo all the other damage your computer has suffered.
|
Instead follow these steps:
- Open task manager by pressing Ctrl-Alt-Del, and click on the "Processes" tab. Look for Spysheriff there and kill the process if you see it. If you see a process named "winstall" (winstall.exe) then delete this one also.
- In the control panel goto "Add/ Remove Programs" and remove the "SpySheriff" program. If it says that it cannot uninstall, then you still have it running. It will uninstall once it's not running.
- Your desktop background will not be restored by that uninstall. Go into the registry by starting RegEdit.exe from the start button.
If your registry editor does not work, read this document "I cannot open the registry editor".
- Look for this key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop
It will have about 6 values stored that disable certain things. Delete this whole branch ActiveDesktop - the system will work with default values afterwards.
Also delete this branch in your registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
- Look in your root directory for a file named winstall.exe. Mine was in c:\ and 24064 Bytes in size.
This file is scheduled to execute each time you boot and it will re-install Spysheriff.
Delete that file.
Update:
As MG from Ottawa comments below, there may also be additional executable files that were created at the same time as winstall.exe. Those files may be named 'winstall.exe' and 'ibm00001.exe'. You should delete those files as well. If you have this file ibm0001.exe please see the other article regarding ibm0001.exe.
- Restart your system.
Done.
Update:
Some people asked about the company that makes SpySheriff. This is their London address:
Company: SpySheriff Development Team
Street address: Tooley 73a
City: London
Zip: EC1Y 1BL
Country: United Kingdom |
|
| Most recent comments
2010-03-21 23:40:19:
by anonymous
in Dating Scams
on Dating scammer Rose Sedu Mubarka:
Please note this lady is a Ghanian. She has an official Ghanain passport. However, her Identiy was stolen by one Abdulrahim Mubarak. He has registered this lady on hundreds of dating sites, and sendin ... read more
|
2010-03-21 20:58:50:
by anonymous
in Dating Scams
on Dating scam artist Sindy Becky Green in Ashley, Ohio (Lagos, Nigeria):
This is an Scammer from Nigeria, he sent these letters to my friend in Colombia.
First letter:
'Good Afternoon Gorgeous.
What Can I say about myself Anyway .. I would tell you... ... read more
|
2010-03-21 20:43:47:
by anonymous
in Dating Scams
on Dating scammer Olga:
olga she been send me three letter with therteen of her phtos than all the letters same as she send to other people krasotulehcka81@yahoo.com
|
2010-03-21 20:36:46:
by mohcapelle
in Dating Scams
on Dating scammer Anna Ogannisyan:
hi ,
alenesska@yahoohoo.com she contact me toe and she told my that she is a dentiste, she leaves in usinsk and she invite my to go to her.
i told to my self i must look at scammer site ... read more
|
2010-03-21 20:23:35:
by anonymous
in Dating Scams
on Dating scammer Sandra Da_Rocha from Accra/Ghana:
Hey,this girl is a soft-core porno actress! lia leah. I doubt if it is her doing all this. Its probably her crazy jealous ex-boyfriend trying to ruin her career!If it really is her ,What is she trying ... read more
|
2010-03-21 20:14:45:
by anonymous
in Male Dating Scammers
on Dating scammer JOHN WILLIAM:
Hi,
This is all new to me and I find it very interesting that he gave you the same story. I confronted 'Dennis' about this and he got quite perturbed with me and wanted the website where I saw a ... read more
|
2010-03-21 20:10:32:
by anonymous
in Dating Scams
on Dating scammer Michelle Daniel:
I doubt if this girl ( lia leah) a soft-core porno actress is really doing all this! It is some guy using her pics to hustle and con his way into your life. For what really,why do this?He never asked ... read more
|
|
2010-03-21 20:06:40:
by anonymous
in Male Dating Scammers
on Dating scammer Drew Johnson:
I AM A SCAMMER, MY NAME FEDERICO NATHANEIL GALONII, I LIE,CHEAT AND STEAL, AND HAVE NO SOUL,AND I OWE PEOPLE THAT HELP ME, AND I DON'T CARE!!! AND I AM STILL SCAMMING MAKING BILLIONS FOR NIGERIA!!!, H ... read more
|
2010-03-21 20:01:30:
by [hidden]
in Dating Scams
on Dating scammer Roselin Jemba jembarose@yahoo.com from Monrovia, Senegal:
this is what i response to the bitch:
i like long walks near the beach and also to give private info about my credit card hahhahahah
lol....i knew it from the first message that u are a s ... read more
|
2010-03-21 18:23:45:
by anonymous
in Dating Scams
on Dating scammer VIOLETTA MAKSIMOVA:
this girl has contacted me for romance is she on this site?
|
|